NEAS[.]e40317e36125c9efc5ec9c73ad9d5140[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e40317e36125c9efc5ec9c73ad9d5140.exe
Size

89KB
MD5

e40317e36125c9efc5ec9c73ad9d5140
SHA1

e277290fcf137f83a082604c2c6b8e0044fa1928
SHA256

7411f10971a83ef9da5d938691a3347c87ba34d0a96cadd95a2bb8d3ff64310c
SHA512

61059e4b98b343b57674f7c19e5ff0f9c9cbd058ab9624358a788308d45e5c878d7646bae6b251a5d5e6128ad9838f09970b077576263d801f90963b315d900b
SSDEEP

1536:ykq52UQxbfU9FdYTFw1S3N+Xz0MOmLzLd9fNrI7mVvPRPgdEqsGCykdl39:I2UMxTq1Sd+XzLOmnLd9fNrI7mVHRodo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e40317e36125c9efc5ec9c73ad9d5140.exe

Files

NEAS.e40317e36125c9efc5ec9c73ad9d5140.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ACK_SERVICE
CLOSE_SERVICE
CONFIG_SERVICE
CONNECT_SERVICE
CYCLE_SERVICE
DRIVERSTATUS
INIT_SERVICE
MESSAGE_SERVICE
RESET_SERVICE
SETUP_SERVICE
STATUS_SERVICE
XPOLL_SERVICE
XRECEIVE_SERVICE
XSEND_SERVICE

Sections

CODE
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ